Free Isaca CGEIT Exam Questions

The IT program manager does not see the value of conducting risk assessments for a new major IT project. The manager is reluctant to cooperate with internal auditors and the newly formed steering committee. Midway through the project, program requirements were changed because the CEO is a friend of a vendor and wants to implement this vendor's new technology. This decision will cause the current IT program budget to be insufficient and will be shown as overspending. After the requirement change request, the IT program manager should FIRST:

Which of the following BEST helps to ensure that IT policies are aligned with organizational strategies?

Which of the following is the MOST important reason to include internal audit as a stakeholder when establishing clear roles for the governance of IT?

IT security is concerned with employees' increasing use of personal equipment for work-related purposes, while employees claim it allows them to be more productive. A decision on whether to modify the enterprise information security policy should be based on:

Within a governance structure for risk management, which of the following activities should be performed by the second line of defense?